Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/0h1R6z_4WvruaWs2FS3WIwfne5Q.roa
File: 0h1R6z_4WvruaWs2FS3WIwfne5Q.roa (raw, json)
Hash identifier: eydcX41nq4Tkv6m05egORH8Nol++AWkKvUlLmJ96CLQ=
Subject key identifier: D2:1D:51:EB:3F:F8:5A:FA:EE:69:6B:36:15:2D:D6:23:07:E7:7B:94
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 0186E02F41F4F1B7F0AA852459FBEEAEE9F9
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/0h1R6z_4WvruaWs2FS3WIwfne5Q.roa
Signing time: Tue 14 Mar 2023 12:53:58 +0000
ROA not before: Tue 14 Mar 2023 12:53:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211970
IP address blocks: 188.72.3.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:2f:41:f4:f1:b7:f0:aa:85:24:59:fb:ee:ae:e9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Mar 14 12:53:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d21d51eb3ff85afaee696b36152dd62307e77b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:d7:54:59:c3:fc:df:0c:8a:e2:63:ab:16:
72:85:74:27:78:fa:47:0b:c8:e3:34:eb:0f:09:4a:
01:02:1d:b2:92:61:96:66:3a:d3:42:62:d1:bd:83:
4e:42:32:18:c9:e8:06:0e:bd:c3:a0:43:f4:96:f2:
e3:c1:26:be:6e:8b:68:6c:d6:55:c0:3e:82:d3:b9:
25:b3:e4:94:7d:a1:56:08:9a:32:a0:f6:db:02:c1:
7a:4c:c5:3f:bd:b8:6c:1b:bc:c4:d9:c6:12:0d:4e:
2e:e8:eb:43:bd:d6:28:8e:64:80:ed:be:f2:fc:dc:
d5:f7:af:41:0a:4a:d4:9e:97:f5:0a:0f:f2:61:72:
58:73:14:d6:3e:73:2e:70:17:fb:81:10:79:6a:3b:
10:2d:d4:96:cf:67:e2:22:6b:b4:ae:75:49:18:d1:
f6:3b:7e:87:33:a7:9b:f3:d4:7d:fc:ea:63:1e:b8:
6d:b6:f7:7a:75:db:2b:41:51:02:a3:62:6f:da:94:
79:da:c0:47:6b:e9:b0:d6:35:b5:db:18:b3:1b:b8:
c4:f1:ef:d2:9e:92:45:cc:01:23:7a:86:1f:6f:10:
56:f3:98:86:ec:cb:a0:3f:5c:fb:d9:62:67:2a:54:
25:e3:fa:e1:81:82:26:12:c4:72:4b:ee:1e:40:34:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1D:51:EB:3F:F8:5A:FA:EE:69:6B:36:15:2D:D6:23:07:E7:7B:94
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/0h1R6z_4WvruaWs2FS3WIwfne5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.3.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3c:33:e0:67:4f:9f:f7:b7:1d:62:67:9d:5e:08:6a:d5:3c:
fd:5e:8f:2f:54:d7:63:c3:8e:c1:6d:c4:26:95:59:eb:7d:eb:
dc:a5:f0:2d:31:32:f5:d5:d2:c7:04:ca:12:e1:de:31:b3:c0:
a8:c4:c8:29:6e:77:e8:2c:1d:4c:57:4c:18:50:dd:5f:27:63:
cf:a9:0a:3c:dc:6a:70:30:78:6c:99:8a:72:56:95:3d:1a:41:
f4:ea:cd:ee:4c:12:e4:2c:76:6d:ff:51:0c:75:9f:a0:9e:57:
52:fa:b6:cb:69:c1:7d:3e:ed:74:9b:b0:25:5a:a4:4f:fd:4b:
26:be:ef:6d:1f:a5:99:1e:c5:6e:1f:f2:36:0c:e5:61:08:72:
e0:75:ba:36:e6:ae:58:49:cb:2a:ae:d9:f4:0a:82:05:77:99:
1c:ad:e5:ef:88:80:48:ab:22:bc:be:78:c0:79:5a:58:78:1a:
16:4f:46:0e:93:9d:b4:68:81:ec:c7:68:68:1f:55:50:dd:dd:
fe:3c:9b:e5:98:85:ec:fd:49:0b:b9:ae:7d:ba:90:52:6b:66:
75:1b:50:9a:9d:15:ea:68:ce:1c:a0:49:c4:af:28:f3:35:7a:
24:bd:f3:bd:fa:d2:34:17:e0:ce:6d:d0:6b:b4:57:e1:c9:3f:
5a:0a:51:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbgL0H08bfwqoUkWfvurun5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw
OWY0OTkwHhcNMjMwMzE0MTI1MzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjFkNTFlYjNmZjg1YWZhZWU2OTZiMzYxNTJkZDYyMzA3ZTc3Yjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKjXVFnD/N8MiuJjqxZyhXQnePpH
C8jjNOsPCUoBAh2ykmGWZjrTQmLRvYNOQjIYyegGDr3DoEP0lvLjwSa+botobNZV
wD6C07kls+SUfaFWCJoyoPbbAsF6TMU/vbhsG7zE2cYSDU4u6OtDvdYojmSA7b7y
/NzV969BCkrUnpf1Cg/yYXJYcxTWPnMucBf7gRB5ajsQLdSWz2fiImu0rnVJGNH2
O36HM6eb89R9/OpjHrhttvd6ddsrQVECo2Jv2pR52sBHa+mw1jW12xizG7jE8e/S
npJFzAEjeoYfbxBW85iG7MugP1z72WJnKlQl4/rhgYImEsRyS+4eQDQlpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNIdUes/+Fr67mlrNhUt1iMH53uUMB8GA1UdIwQY
MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt
NTJiOWU2YTE2MzUwLzEvMGgxUjZ6XzRXdnJ1YVdzMkZTM1dJd2ZuZTVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw
LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEgDMA0G
CSqGSIb3DQEBCwUAA4IBAQAdPDPgZ0+f97cdYmedXghq1Tz9Xo8vVNdjw47BbcQm
lVnrfevcpfAtMTL11dLHBMoS4d4xs8CoxMgpbnfoLB1MV0wYUN1fJ2PPqQo83Gpw
MHhsmYpyVpU9GkH06s3uTBLkLHZt/1EMdZ+gnldS+rbLacF9Pu10m7AlWqRP/Usm
vu9tH6WZHsVuH/I2DOVhCHLgdbo25q5YScsqrtn0CoIFd5kcreXviIBIqyK8vnjA
eVpYeBoWT0YOk520aIHsx2hoH1VQ3d3+PJvlmIXs/UkLua59upBSa2Z1G1CanRXq
aM4coEnEryjzNXokvfO9+tI0F+DObdBrtFfhyT9aClFe
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:28 2023 by rpki-client on console.sobornost.net